Description
SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.
References
- 40025 third-party-advisory
- http://www.taskfreak.com/original/versions
- http://secunia.com/secunia_research/2010-79/
- 20100629 Secunia Research: TaskFreak "password" SQL Injection Vulnerability mailing-list
- 41218 vdb-entry
- 65847 vdb-entry